> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://meetergo.crisp.help/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Okta SSO Configuration Guide

Before configuring OIDC SSO integration with Okta, ensure the following requirements are met:

* **meetergo Plan**: Teams plan or higher with SSO addon purchased
* **Okta Access**: Admin access to your Okta organization to create OIDC applications
* **Email Domain**: A verified email domain that will be used to identify your organization during SSO

## Supported Features

* SP-initiated SSO (Single Sign-On)
* Just-In-Time provisioning
* OIDC (OpenID Connect) authentication
For more information on the listed features, visit the [Okta Glossary](https://help.okta.com/okta_help.htm?type=oie&id=ext_glossary).

## Configuration Steps

### Step 1: Create OIDC Application in Okta

1. In your Okta Admin Console, go to **Applications > Applications**
2. Click **Create App Integration**
3. Select **OIDC - OpenID Connect** as the Sign-in method
4. Choose **Web Application** as the Application type
5. Configure the following settings:
    * **App integration name**: `meetergo`
    * **Grant type**: Select **Authorization Code**
    * **Sign-in redirect URIs**: `https://auth.meetergo.com/oauth2/idpresponse`
    * **Sign-out redirect URIs**: `https://my.meetergo.com/login` (optional)
    * **Controlled access**: Assign to appropriate users or groups
6. Click **Save**
7. Note the **Client ID** and **Client Secret** from the application details

### Step 2: Request SSO Configuration from meetergo

1. Contact meetergo support at **richard@crisp.meetergo.com**
2. Include the following information in your request:
    * **Subject**: "OIDC SSO Setup Request for [Your Organization Name]"
    * **Organization Name**: Your company name
    * **Email Domain**: The email domain for your users (e.g., `yourcompany.com`)
    * **Okta Domain**: Your Okta organization domain (e.g., `yourcompany.okta.com`)
    * **Client ID**: From Step 1
    * **Client Secret**: From Step 1
    * **Primary Contact**: Admin contact for coordination

### Step 3: Confirmation and Testing

1. meetergo support will configure SSO for your organization (typically within 1 business day)
2. You'll receive confirmation when SSO is enabled
3. Test the configuration by following the [SP-initiated SSO](https://claude.ai/chat/f6c5372f-619f-418c-aefd-44c48d741ce6#sp-initiated-sso) process below

## SP-initiated SSO

The sign-in process is initiated from meetergo.
1. Navigate to [my.meetergo.com/login](https://my.meetergo.com/login)
2. Click **"Sign in with SSO"**
3. Enter your email address (must use your organization's configured domain)
4. You'll be redirected to your Okta login page
5. Enter your Okta credentials
6. If authentication is successful, you'll be redirected to the meetergo dashboard

## User Attribute Mapping

The following user attributes are automatically mapped from Okta to meetergo during authentication:

| meetergo Attribute | Okta Claim |
| ---- |
| Email | email |
| First Name | given_name |
| Last Name | family_name |
## Note

* Only users with email addresses matching your configured domain can use SSO
* Users are automatically provisioned in meetergo on their first successful SSO login
* SSO must be enabled for your organization before users can authenticate
* Regular username/password authentication remains available alongside SSO

## Troubleshooting

### Common Issues

**Issue**: "SSO not configured for this domain" error **Solution**: Verify that your email domain matches exactly what was provided to meetergo support
**Issue**: Redirect loop or authentication errors **Solution**:
* Verify the Client ID and Client Secret are correct in both Okta and meetergo
* Check that the redirect URI in Okta exactly matches: `https://auth.meetergo.com/oauth2/idpresponse`
**Issue**: User attributes not mapping correctly **Solution**: Ensure your Okta user profiles include the required fields: email, given_name, family_name

### Support Contact

For technical support or configuration assistance:
* **Email**: richard@crisp.meetergo.com
* **Include**: Your organization name, domain, and detailed description of the issue

*This guide is designed for meetergo customers using Okta as their identity provider. For other identity provider configurations, contact meetergo support.*